Certificate Chain Checker

The checker reads PEM certificates, maps issuer and subject relationships, highlights likely leaf and root positions, and optionally compares a hostname against the likely leaf SAN list. It is designed for structural debugging, not public-trust validation.

1. Paste the leaf certificate and any intermediates as PEM blocks.
2. Add a hostname when you want SAN or common-name guidance for the likely leaf.
3. Click Analyze chain and read the recommended leaf-to-root order first.
4. Use the warning list to spot missing issuers, duplicates, or unusual self-signed leaf material.

This page does not check revocation, fetch intermediates, consult a browser trust store, or guarantee that a public browser would accept the chain. It tells you whether the pasted bundle looks structurally coherent and whether the leaf hostname claim appears to line up.

• X.509 Certificate Parser - Decode one PEM certificate in more detail after you know which cert in the bundle matters.
• Key Inspector - Confirm whether pasted PEM material is a certificate or a key before you debug the chain.
• Certificate chain basics - Read the plain-English guide when you need the trust model behind the chain map.